VULNERABILITY INTELLIGENCE

CVE-2026-25710

EPSS probability0.13%
CISA KEVNot currently listed
Published2026-05-13
Last modified2026-10-26

Description

The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the system.

Weakness classification

  • meissner@suse.de: CWE-250

Primary references